JP2002063528A - System and method for settlement - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a system and a method for settlement which can judge the adequacy of settlement information received from a member. SOLUTION: An authenticating server 209 deciphers cipher data included in the order information received from a member terminal 201 and checks whether or not the order information is altered and whether an alliance store server 203 is adequate. When it is found to be adequate, the member is authenticated. The authenticating server 209 sends information needed for credit processing ((6)). A common settlement center 207 sends the information sent back from the authenticating server 209 and the order information to a debit settlement server 205 ((7)). When it is decided that settlement is possible, the debit settlement server 205 subtracts the purchase amount from the account of the member.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a settlement system and a settlement method, and more particularly, to a settlement system for transmitting information for confirming an Internet settlement user to a settlement server without passing through a terminal of a member store. The present invention relates to a system and a settlement method.

[0002]

2. Description of the Related Art As a conventional electronic payment method, an identification information (ID) and a password are used as identification information to identify a member of a payment service, and a purchase of goods is performed through the Internet. Methods are known.

FIG. 4 shows the flow of a settlement process for finance using a network in a conventional example.

[0004] Reference numeral 401 denotes a member terminal, which is a PC (personal computer) used by the member when purchasing merchandise or the like using an electronic settlement service. Reference numeral 403 denotes a member store server, which is managed by a retail store that entrusts credit of a member to a financial institution such as a bank to a settlement service company. Reference numeral 407 denotes an authentication server managed by the settlement service company, which performs a credit inquiry to a bank or the like and relays information of approval for the inquiry. Also, 40
Reference numeral 5 denotes a debit payment server managed by a financial institution such as a bank. The member member terminal 401, member store server 403, debit payment server 405, and authentication server 407 exchange the following information by communication between the computer systems.

[0005] In the settlement service system, the subscribing member terminal 401 connects to the Internet and browses merchandise information on the homepage of the member store server 403 ((1)). When purchasing the desired product, the member
An electronic file including an order form and a payment form is sent from the member terminal 401 to the member store server 403 to place an order for a product ((2)). At the time of ordering, a member obtained by encrypting the identification information (ID) and the identification information such as the password input on the homepage from the member terminal 401 to identify the purchaser is transmitted. Here, since the information transmitted from the member terminal 401 passes through the member store server 403, the information is subjected to an encryption process.

[0006] A member store server 403 that has received an order for a product
Notifies the authentication server 407 of the order contents including the ID and the password based on the order form ((4)).

[0007] In the authentication server 407, the number of the cash card associated with the ID is registered in advance. The authentication server 407 checks the information received from the member store server 403 for falsification of the identification information such as an ID and a password. If the received information is confirmed to be authentic, the ID and password are confirmed and the member is authenticated. As a result of the authentication, if the validity of the ID and the password is recognized, an inquiry to the debit settlement server 405, that is, a credit inquiry is made based on the number of the cash card corresponding to the ID as to whether the member has the ability to pay ((( 4)).

[0008] The debit settlement server 405 examines whether the member can pay for the inquiry. As a result of the examination, if the member can pay, the purchase price is deducted from the account of the financial institution that manages the debit settlement server 405 and transferred to the member store account. This result is transmitted to the member store server 403 ((5)), and information for notifying the establishment of the transaction is transmitted to the member terminal 401 ((6)). Thereafter, the merchandise is shipped from the member store to the member.

[0009]

However, in the conventional Internet payment processing, the transfer of information between the member's terminal and the payment server is always transmitted to the payment server via the member store. If such a payment method is applied, there is a possibility that the merchandise information provided by the member store to the member and the information transmitted from the member via the member store may be falsified. Financial institutions could not determine the presence or absence of any. Therefore, there is a problem that even if the individual authentication of the member can be performed, there is a possibility that an improper transaction is performed.

Therefore, an object of the present invention is to provide a payment system and a payment method capable of judging the validity of payment information received from a member in a payment system having a common mechanism corresponding to various payment methods for electronic payment. Is to provide.

[0011]

In order to achieve the above object, according to the first aspect of the present invention, there is provided a member store server for providing a product sales service through a network, and a subscription for performing a transaction with the member store server through a network. Member terminal,
A payment system comprising: an authentication server that performs personal authentication of a member who can use the sales service; and a payment server that performs a payment process based on information transmitted from the member terminal. Comprises: means for adding first encrypted data to sales information; and means for transmitting the sales information to the member terminal. The member terminal receives the sales information; Means for transmitting the encrypted data and the identification information of the subscribing member to the authentication server, and means for transmitting order information including the payment amount to the payment server, wherein the authentication server includes the first encrypted data and Means for receiving the identification information; means for determining whether the member store server is authentic by decrypting the first encrypted data; and Means for authenticating the incoming members, characterized in that the settlement information including the account number associated with the identification information to the settlement server and means for transmitting to the payment server.

The invention described in claim 2 is the first invention.
In the settlement system described in the above, the settlement server, means for receiving the order information and the settlement information, means for examining whether or not settlement is possible based on the order information and the settlement information, and the settlement is possible in the examination Means for subtracting the payment amount from the balance associated with the account number when the determination is made.

[0013] The invention described in claim 3 is the first invention.
Or the settlement system according to 2, further comprising a joint settlement center for receiving the first encrypted data and the identification information from the subscriber member terminal, wherein the receiving means of the authentication server is configured to receive the encrypted data via the joint settlement center via the joint settlement center. Receiving the first encrypted data and the identification information.

The invention described in claim 4 is the third invention.
3. The settlement system according to claim 1, wherein the joint settlement center receives the order information from the joining member terminal, and a receiving unit of the settlement server receives the settlement information via the joint settlement center. .

[0015] Further, the invention described in claim 5 is the third invention.
Or the settlement system according to 4, wherein the joint settlement system further includes a unit for receiving a password associated with the identification information from the member terminal, and the receiving unit of the authentication server includes the joint settlement center. The means for receiving the password through the authentication server and authenticating the authentication server authenticates the member based on the identification information and the password.

The invention described in claim 6 is the first invention.
6. The payment system according to any one of claims 5 to 5, wherein the payment server further includes a unit that adds second encrypted data to information indicating a result of the check, and a unit that the payment server transmits includes the check Is transmitted to the member store server.

The invention described in claim 7 is the first invention.
7. The settlement system according to any one of items 6 to 6, wherein information indicating a result of the examination is transmitted to the member store server via the member terminal.

The invention described in claim 8 is the first invention.
8. The payment system according to any one of items 7 to 7, wherein the member store server further includes means for determining whether the payment server is authentic by decrypting the second encryption. Features.

The invention according to claim 9 is the first invention.
9. The settlement system according to any one of items 8 to 8, further comprising a backbone system for temporarily storing the subtracted payment amount.

According to a tenth aspect of the present invention, in the settlement system according to any one of the first to ninth aspects, the core system adds and stores a plurality of the subtracted settlement amounts. Means are provided.

[0021] Further, the invention according to claim 11 is a member store server for performing a product sales service through a network, a member terminal for performing a transaction with the member store server through a network, and a subscribing terminal capable of using the sales service. A payment method performed in a payment system including an authentication server for performing personal authentication of a member and a payment server for performing a payment process based on information transmitted from the member terminal. Adding the encrypted data to the sales information and transmitting the sales information to the enrollment member terminal; receiving the sales information at the enrollment member terminal; and transmitting the first encrypted data and the identification information of the enrollment member to the authentication server. Transmitting, and transmitting the order information including the payment amount to the payment server; Determining whether the member store server is genuine by receiving the ID data and the identification information, and decrypting the first encrypted data; and And transmitting the payment information including the account number associated with the identification information to the payment server to the payment server.

[0022]

Embodiments of the present invention will be described below in detail with reference to the drawings.

FIG. 1 is a diagram showing a configuration of a settlement system according to the present embodiment.

In FIG. 1, reference numeral 207 denotes a joint settlement center for mediating settlement of a plurality of financial institutions and performing personal authentication of a product purchaser via the Internet as a communication network. The joint settlement center 207 establishes an H
A home page described in a TML language (HyperText Markup Language) or a markup language having a similar function is released, and through this home page, information of a member and a member of a payment service provided by the payment system according to the present embodiment can be obtained. Can give and receive.

Reference numeral 201 denotes a subscribing member terminal, which is a PC (personal computer) of a subscribing member of the settlement service according to the present embodiment. The member terminal 201 is also called a client. Reference numeral 203 denotes a member store server that provides a product sales service through a network, and is a server of a retail store that outsources the settlement service according to the present embodiment to the joint settlement center 207. The member store server 203 publishes a homepage and provides sales information of goods or services through this page. 209-a and 209-b
Is an authentication server of the bank, and performs authentication of the member of the debit card. Reference numerals 205-a and 205-b denote payment servers for debit cards, which examine whether a member who has subscribed to the payment service according to the present embodiment can pay by an electronic payment method.

The authentication server 209 includes
7 and communication processing of the settlement information through a dedicated line. Also,
These servers are connected to the Internet via a line (not shown), and can perform communication processing with the member terminal 201 or the like without passing through the joint settlement center 207.

The debit payment servers 205-a and 20
5-b is connected to the relay service center 211 specific to the settlement method in order to perform communication processing with the joint settlement center 207. As the relay service center 211-b, for example, a CAFIS center which is an online credit information service center provided by NTT DATA Corporation (company name) is used. Payment data relay service center 2
In the communication process via the PC 11, a unique encryption / decryption process is performed in order to prevent personal information from being stolen.

FIG. 2 shows a hardware configuration of a computer system used in the settlement system of the present invention.

The computer system includes a central processing unit (CPU) 101 and a RAM 105. CPU10
1 and the RAM 105 are connected to the auxiliary storage device 107 via the bus 117. Auxiliary storage device 107,
A storage medium such as the ROM 103 can be loaded with the RAM 105 to give desired instructions to the CPU 101 and the like, and can record computer program codes for implementing the present invention.

This computer program is executed in cooperation with an operating system. It is preferable that the operating system supports a GUI multi-window environment as a standard, but the present invention is not limited to a specific operating system environment.

Auxiliary storage device 107 of member store server 203
Stores an encryption addition program. In this program, the member store server 203 checks the name of the member store,
The sales information including the settlement amount, the order number, etc. is entered into the member terminal 2
01, different encryption data is added to the order information every time the sales information is provided. The encrypted data is created by, for example, defining an appropriate function for associating a numerical value with a character string, and using this function to convert the character string included in the order information into a numerical value having a predetermined number of digits. . In this manner, different encrypted data is created for each sales information based on the contents of the sales information.

In the auxiliary storage device 107 of the settlement server 205, a database for storing information related to the examination of the member who subscribes to the settlement service is constructed. For example, data such as the member number of a joining member and the limit of lending to that member are stored and stored in the form of a table. In the auxiliary storage device 107 of the authentication server 209, a database for storing information necessary for authentication of a member is constructed. For example, IDs, passwords, account numbers, and the like for identifying each subscribing member are stored and stored in a table form in advance.

A communication interface 109 is connected to the bus 117. The communication interface 109 is, for example, an integrated service digital network (I) that enables a data communication connection to the Internet / WWW (World Wide Web).
SDN) card, or a modem.

Reference numeral 115 denotes a display device such as a CRT, 111 denotes an input device for inputting characters and numerals such as a keyboard, and 113 denotes a cursor such as a mouse or a trackball for controlling the movement of the cursor on the display device 115. It is a control device. These are connected via a bus 117.

Each computer system implements a gateway program which is a program for relaying between networks. In addition, the computer system includes browsing software for converting the HTML language of a homepage on the Internet into a form that can be actually browsed.
Browser is installed (installed). As a browser, for example, Netscape's Netscape Navigat
Or, use Microsoft Internet Explorer. However, these are examples and do not limit the browser environment in the present invention.

An HTTP (Hypertext Transport Program) is used between computer systems connected to the Internet.
An HTML document is exchanged between a WWW server and a Web browser based on an otocol) protocol. Therefore,
URL from Web browser of each computer system
H on the WWW server in (Uniform Resource Locator) format
A TML document can be specified or invoked.

When information is exchanged between computer systems via the Internet, encryption / decryption processing is performed to prevent the personal information from being stolen. As an encryption method for exchanging personal information and credit information, for example, SSL (Secure Socket Layer)
Encryption method can be used. If the WWW browser for accessing the WWW server and reading the data supports SSL (for example, Netscape Navigator by Netscape, Internet by Microsoft)
Explorer) can transmit and receive encrypted information without any special settings in each computer system.

Although the example of FIG. 2 shows a computer system in a stand-alone environment, it can be implemented as a client / server system.
In such a case, since the client machine can be connected to the server machine via a LAN via Ethernet (registered trademark) or the like, some of the functions necessary for implementing the present invention are arranged on the server machine side. May be. The design of the functions to be arranged on the server machine or the client machine can be changed according to the application of the present invention, and various changes relating to the embodiments are concepts included in the concept of the present invention. is there.

Hereinafter, the operation of the settlement system according to the present embodiment will be described in detail.

FIG. 3 shows a flow of a settlement process using the settlement system according to the present embodiment.

When the member accesses the member store server 203 via the Internet, the member terminal 201
Displays a home page based on the received HTML document, and the member can browse sales information of goods or services displayed on the home page. The sales information includes information such as a product name, a settlement amount, and an order number. When purchasing the desired product,
The member enters a product name in the order form and the payment form on the home page displayed on the member terminal 201 and places an order for the product. The order form may be automatically created by selecting a desired product name from a list of product names displayed on the screen, for example.

When the order form is created, the member store server 203
Transmits data according to the HTTP protocol to the member terminal 20.
1 ((1)). The information transmitted here is added with encrypted data created by the encryption adding program based on the information to be provided. The encrypted data is data that differs each time the access is made from the member terminal 201 and that can be decrypted by the authentication server 209. This data is created by, for example, defining an appropriate function for associating a numerical value with a character string, and using this function to convert the character string included in the order information into a numerical value having a predetermined number of digits. . In this manner, different encrypted data is created for each sales information based on the contents of the sales information. The authentication server 209 can decrypt the encrypted data transmitted from the member store server 203 by executing a decryption function corresponding to this function.

Upon receipt of the request, the subscriber member terminal 201
The order information including the input payment amount of the product and the added encryption is transmitted to the joint payment center 207 ((2)).

The joint settlement center 207 is a member terminal 2
On the display device 01, a home page describing that an ID and a password are required as information of the member himself is displayed. Further, a dialog box for inputting an ID and a password is displayed on the homepage ((3)). FIG. 5 shows an example of the dialog box displayed here.

The member inputs an ID and a password stored in advance in the authentication server 209 in the entry fields of the dialog box, presses an OK button, and transmits the input contents to the settlement co-operation center 207 ( (4)).
The joint settlement center 207 that has received this information determines the financial institution that issued the ID from the predetermined digit of the ID. After this determination, the debit authentication server 209 that issued the ID
Transmits an ID and a password to the member, and requests information necessary for authentication and credit processing of the member ((5)).

The authentication server 209 decrypts the encrypted data included in the received order information, and checks whether the order information has been falsified and whether the member store server 203 that has provided the sales information is authentic. If it is determined in this check that the order information and the member store server 203 are genuine, the member is authenticated by checking the validity of the ID and password. If the result of the authentication indicates that the ID and the password match, the authentication server 20
9 transmits the settlement information necessary for the credit processing ((6)). The settlement information transmitted here includes the bank number, branch number, account name, account number, and account name corresponding to the ID.

The joint settlement center 207 transmits the settlement information and the order information returned from the authentication server 209 to the debit settlement server 205 via the relay service center 211, and makes a request for examination ((7)). The debit payment server 205 examines the membership by comparing the balance of the account number included in the received payment information with the purchase price of the product. As a result of the examination, if it is determined that the member can pay, the debit payment server 205 deducts the purchase amount from the account of the member.

The deducted amount may be immediately transferred to the member store's account, or may be transferred on a predetermined date. In the latter case, the information of the pool account is stored in a backbone system for managing account information connected to the network. Then, the balance of the pool account is updated by adding the amount deducted from the subscriber's account to the balance of the pool account. Thereafter, when a predetermined date has come, a transfer process may be performed to the member store that sold the product from the pool account. By adopting such a transfer process, it is possible to temporarily transfer a settlement amount based on a plurality of transactions to a pool account, and realize a transfer by a batch process on a predetermined date.

The result of the examination performed in the debit settlement server 205 is returned to the joint settlement center 207 ((8)). The joint settlement center 207 transmits the information on the examination result, that is, whether or not the settlement is possible, and if the settlement is impossible, the information including the reason thereof to the member store server 203 via the member terminal 201 ((9)). Specifically, the data according to the HTTP protocol to be transmitted is stored in the member store server 2
03 and the data to be transmitted are described and returned to the member terminal 201. The returned information is added with encrypted data created by the encryption adding program based on the provided information. The encrypted data is data that differs every time a payment transaction is made and that can be decrypted by the member store server 203.

The member store server 203 decrypts the encrypted data added to the received information of the examination result, falsifies the information generated by the debit payment server 205, and checks whether the debit payment server 205 is authentic. Perform a check.

If the member can pay, the purchase of the product is confirmed, and the product is sent from the member store to the member.
Here, when the member can pay, confirmation of purchase information may be requested. The request for confirmation can be made by displaying an HTML document having a predetermined confirmation button on the member terminal 201, and prompting the member to press the button.

Although the preferred embodiment of the present invention has been described above, it is needless to say that the present invention is not limited to this embodiment and can be implemented in other various modes.

For example, in the settlement service system according to the present embodiment, it is possible to further introduce another form of settlement method such as credit settlement or prepaid settlement. Further, it is also possible to use the settlement servers of a large number of financial institutions adopting the same settlement method as components of the system. In this case, a code for identifying the financial institution or the settlement method is provided in a predetermined digit of the ID given to each member,
The identification process based on the code may be performed by the joint settlement center 207.

In the above-described embodiment, information exchange between the member terminal and the settlement server or between the member terminal and the authentication server is performed through the joint settlement center. Alternatively, the information may be directly transmitted or received without going through. The same applies to the transmission or reception of information among the three members of the member store server, the authentication server, and the payment server.

In the above-described embodiment, an example has been described in which a settlement service is provided to a subscribing member via the Internet using an HTML document. A line, an in-house LAN, a cable television, and a satellite communication network can be used.

The member terminal 2 based on the HTML document
It is not necessary to limit the display mode of the information to be displayed on the display unit 01 to the above embodiment.

Various modifications can be made to the above embodiment in addition to the modifications described above. However, these modifications are limited to the technical idea shown in the claims of the present invention, and the modifications fall within the technical scope of the present invention.

[0058]

As described above, according to the present invention,
A member store server that provides product sales services through the network, a member terminal that performs transactions through the member store server and the network, an authentication server that performs personal authentication of members who can use the sales service, A payment server comprising: a payment server for performing payment processing based on information stored in a member server, wherein the member store server includes means for adding the first encrypted data to the sales information and means for transmitting the sales information to the member terminal. And the member terminal is
Means for receiving the sales information, means for transmitting the first encrypted data and the identification information of the subscribing member to the authentication server, and means for transmitting order information including the payment amount to the payment server, the authentication server comprising: Means for receiving the first encrypted data and the identification information; means for determining whether or not the member store server is authentic by decrypting the first encrypted data;
A means for authenticating a member based on the identification information and a means for transmitting payment information including an account number associated with the identification information to the payment server are provided to the payment server. It is also possible to check whether the information such as the payment amount and the order number, the feasibility of the payment generated by the bank, the reason for the failure of the payment and the like are falsified, and confirm the legitimacy of the member store or the financial institution.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration of a settlement system according to an embodiment of the present invention.

FIG. 2 is a diagram showing a hardware configuration of a computer system used in the settlement system of the present invention.

FIG. 3 is a diagram showing a flow of a payment process using a payment system according to an embodiment of the present invention.

FIG. 4 is a diagram showing a flow of a settlement process using a network in a conventional example.

FIG. 5 is a diagram showing an example of a dialog box displayed on the display device of the member terminal.

[Explanation of symbols]

 101 CPU 103 ROM 105 RAM 107 Auxiliary storage device 109 Communication interface 111 Input device 113 Cursor control device 115 Display device 117 Bus 201 Membership member terminal 203 Member store server 205-a, 205-b Debit payment server 207 Joint payment center 209-a , 209-b Debit authentication server 211-a, 211-b Relay service center 401 Member terminal 403 Member store server 405 Credit payment server 407 Authentication server 601 Entry field 603 OK button

Claims (11)

[Claims] 1. A member store server for performing a product sales service through a network, a member terminal for performing a transaction with the member server, and an authentication server for performing personal authentication of a member who can use the sales service. A payment server comprising: a payment server that performs payment processing based on information transmitted from the member terminal; wherein the member store server adds first encrypted data to sales information; Means for transmitting sales information to the member terminal; means for receiving the sales information; and transmitting the first encrypted data and the identification information of the member to the authentication server. Means for transmitting order information including a payment amount to the payment server, wherein the authentication server comprises: Means for receiving the identification information; means for determining whether or not the member store server is authentic by decoding the first encrypted data; means for authenticating the member based on the identification information. And a means for transmitting, to the payment server, payment information including an account number associated with the identification information, to the payment server. 2. The settlement system according to claim 1, wherein the settlement server receives the order information and the settlement information, and examines whether or not settlement is possible based on the order information and the settlement information. And a means for subtracting the settlement amount from the balance associated with the account number when it is determined in the examination that settlement is possible. 3. The settlement system according to claim 1, further comprising a joint settlement center for receiving said first encrypted data and said identification information from said member terminal, wherein said means for receiving by said authentication server comprises: A payment system, comprising: receiving the first encrypted data and the identification information via the joint payment center. 4. The settlement system according to claim 3, wherein the joint settlement center receives the order information from the member terminal, and the receiving means of the settlement server receives the order information via the joint settlement center. Settlement system, which receives 5. The settlement system according to claim 3, wherein the joint settlement system further includes a unit for receiving a password associated with the identification information from the member terminal, and receiving the password from the authentication server. Means for receiving the password via the joint settlement center,
The settlement system, wherein the means for authenticating the authentication server authenticates the member based on the identification information and the password. 6. The payment system according to claim 1, wherein the payment server further includes a unit for adding the second encrypted data to information indicating a result of the examination. Transmitting means for transmitting the result of the examination to the member store server. 7. The settlement system according to claim 1, wherein the information indicating the result of the examination is transmitted to the member store server via the member terminal. And payment system. 8. The settlement system according to claim 1, wherein the member store server determines whether the settlement server is authentic by decrypting the second code. A settlement system, further comprising means for performing. 9. The settlement system according to claim 1, further comprising a backbone system for temporarily storing the subtracted settlement amount. 10. The settlement system according to claim 1, wherein the backbone system includes means for adding and storing a plurality of the subtracted settlement amounts. Payment system. 11. A member store server for performing a product sales service through a network, a member terminal for performing a transaction with the member server, and an authentication server for performing personal authentication of a member who can use the sales service. A settlement method performed in a settlement system comprising: a settlement server that performs a settlement process based on information transmitted from the joining member terminal, wherein the member store server adds first encrypted data to sales information. Transmitting the sales information at the enrollment member terminal, transmitting the first encrypted data and the identification information of the enrollment member to the authentication server, and order information including a settlement amount. Transmitting the first encrypted data and the identification information at the authentication server. Receiving and decrypting the first encrypted data to determine whether or not the member store server is authentic; and performing authentication of the member based on the identification information in the authentication server, and performing the settlement. Transmitting a payment information including an account number associated with the identification information to the payment server to the server.